Domů Procházet Nápověda
Přihlásit se
cturan
/
3proxy
1
0
Rozštěpit 0
Soubory Úkoly 0 Pull Requesty 0 Wiki
Strom: 4ca8988831
Větve Značky
3proxy
/
src
/
proxy.c

proxy.c 34 KB
Historie Surový

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105 
  1. /*
    2. 

  2.    3APA3A simpliest proxy server
    3. 

  3.    (c) 2002-2008 by ZARAZA <3APA3A@security.nnov.ru>
    4. 

  4. 

  5.    please read License Agreement
    6. 

  6. 

  7. */
    8. 

  8. 

  9. 

  10. #include "proxy.h"
    11. 

  11. 

  12. #define RETURN(xxx) { param->res = xxx; goto CLEANRET; }
    13. 

  13. 

  14. char * proxy_stringtable[] = {
    15. 

  15. /* 0 */	"HTTP/1.0 400 Bad Request\r\n"
    16. 

  16. 	"Proxy-Connection: close\r\n"
    17. 

  17. 	"Content-type: text/html; charset=us-ascii\r\n"
    18. 

  18. 	"\r\n"
    19. 

  19. 	"<html><head><title>400 Bad Request</title></head>\r\n"
    20. 

  20. 	"<body><h2>400 Bad Request</h2></body></html>\r\n",
    21. 

  21. 

  22. /* 1 */	"HTTP/1.0 502 Bad Gateway\r\n"
    23. 

  23. 	"Proxy-Connection: close\r\n"
    24. 

  24. 	"Content-type: text/html; charset=us-ascii\r\n"
    25. 

  25. 	"\r\n"
    26. 

  26. 	"<html><head><title>502 Bad Gateway</title></head>\r\n"
    27. 

  27. 	"<body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>\r\n",
    28. 

  28. 

  29. /* 2 */	"HTTP/1.0 503 Service Unavailable\r\n"
    30. 

  30. 	"Proxy-Connection: close\r\n"
    31. 

  31. 	"Content-type: text/html; charset=us-ascii\r\n"
    32. 

  32. 	"\r\n"
    33. 

  33. 	"<html><head><title>503 Service Unavailable</title></head>\r\n"
    34. 

  34. 	"<body><h2>503 Service Unavailable</h2><h3>You have exceeded your traffic limit</h3></body></html>\r\n",
    35. 

  35. 

  36. /* 3 */	"HTTP/1.0 503 Service Unavailable\r\n"
    37. 

  37. 	"Proxy-Connection: close\r\n"
    38. 

  38. 	"Content-type: text/html; charset=us-ascii\r\n"
    39. 

  39. 	"\r\n"
    40. 

  40. 	"<html><head><title>503 Service Unavailable</title></head>\r\n"
    41. 

  41. 	"<body><h2>503 Service Unavailable</h2><h3>Recursion detected</h3></body></html>\r\n",
    42. 

  42. 

  43. /* 4 */	"HTTP/1.0 501 Not Implemented\r\n"
    44. 

  44. 	"Proxy-Connection: close\r\n"
    45. 

  45. 	"Content-type: text/html; charset=us-ascii\r\n"
    46. 

  46. 	"\r\n"
    47. 

  47. 	"<html><head><title>501 Not Implemented</title></head>\r\n"
    48. 

  48. 	"<body><h2>501 Not Implemented</h2><h3>Required action is not supported by proxy server</h3></body></html>\r\n",
    49. 

  49. 

  50. /* 5 */	"HTTP/1.0 502 Bad Gateway\r\n"
    51. 

  51. 	"Proxy-Connection: close\r\n"
    52. 

  52. 	"Content-type: text/html; charset=us-ascii\r\n"
    53. 

  53. 	"\r\n"
    54. 

  54. 	"<html><head><title>502 Bad Gateway</title></head>\r\n"
    55. 

  55. 	"<body><h2>502 Bad Gateway</h2><h3>Failed to connect parent proxy</h3></body></html>\r\n",
    56. 

  56. 

  57. /* 6 */	"HTTP/1.0 500 Internal Error\r\n"
    58. 

  58. 	"Proxy-Connection: close\r\n"
    59. 

  59. 	"Content-type: text/html; charset=us-ascii\r\n"
    60. 

  60. 	"\r\n"
    61. 

  61. 	"<html><head><title>500 Internal Error</title></head>\r\n"
    62. 

  62. 	"<body><h2>500 Internal Error</h2><h3>Internal proxy error during processing your request</h3></body></html>\r\n",
    63. 

  63. 

  64. /* 7 */	"HTTP/1.0 407 Proxy Authentication Required\r\n"
    65. 

  65. 	"Proxy-Authenticate: Basic realm=\"proxy\"\r\n"
    66. 

  66. 	"Proxy-Connection: close\r\n"
    67. 

  67. 	"Content-type: text/html; charset=us-ascii\r\n"
    68. 

  68. 	"\r\n"
    69. 

  69. 	"<html><head><title>407 Proxy Authentication Required</title></head>\r\n"
    70. 

  70. 	"<body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>\r\n",
    71. 

  71. 

  72. /* 8 */	"HTTP/1.0 200 Connection established\r\n\r\n",
    73. 

  73. 

  74. /* 9 */	"HTTP/1.0 200 Connection established\r\n"
    75. 

  75. 	"Content-Type: text/html\r\n\r\n",
    76. 

  76. 

  77. /* 10*/	"HTTP/1.0 404 Not Found\r\n"
    78. 

  78. 	"Proxy-Connection: close\r\n"
    79. 

  79. 	"Content-type: text/html; charset=us-ascii\r\n"
    80. 

  80. 	"\r\n"
    81. 

  81. 	"<html><head><title>404 Not Found</title></head>\r\n"
    82. 

  82. 	"<body><h2>404 Not Found</h2><h3>File not found</body></html>\r\n",
    83. 

  83. 	
    84. 

  84. /* 11*/	"HTTP/1.0 403 Forbidden\r\n"
    85. 

  85. 	"Proxy-Connection: close\r\n"
    86. 

  86. 	"Content-type: text/html; charset=us-ascii\r\n"
    87. 

  87. 	"\r\n"
    88. 

  88. 	"<html><head><title>403 Access Denied</title></head>\r\n"
    89. 

  89. 	"<body><h2>403 Access Denied</h2><h3>Access control list denies you to access this resource</body></html>\r\n",
    90. 

  90. 

  91. /* 12*/	"HTTP/1.0 407 Proxy Authentication Required\r\n"
    92. 

  92. #ifndef NOCRYPT
    93. 

  93. 	"Proxy-Authenticate: NTLM\r\n"
    94. 

  94. #endif
    95. 

  95. 	"Proxy-Authenticate: basic realm=\"proxy\"\r\n"
    96. 

  96. 	"Proxy-Connection: close\r\n"
    97. 

  97. 	"Content-type: text/html; charset=us-ascii\r\n"
    98. 

  98. 	"\r\n"
    99. 

  99. 	"<html><head><title>407 Proxy Authentication Required</title></head>\r\n"
    100. 

  100. 	"<body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>\r\n",
    101. 

  101. 

  102. /* 13*/	"HTTP/1.0 407 Proxy Authentication Required\r\n"
    103. 

  103. 	"Proxy-Connection: keep-alive\r\n"
    104. 

  104. 	"Content-Length: 0\r\n"
    105. 

  105. 	"Proxy-Authenticate: NTLM ",
    106. 

  106. 

  107. /* 14*/	"HTTP/1.0 403 Forbidden\r\n"
    108. 

  108. 	"Proxy-Connection: close\r\n"
    109. 

  109. 	"Content-type: text/html; charset=us-ascii\r\n"
    110. 

  110. 	"\r\n"
    111. 

  111. 	"<pre>",
    112. 

  112. 

  113. /* 15*/	"HTTP/1.0 503 Service Unavailable\r\n"
    114. 

  114. 	"Proxy-Connection: close\r\n"
    115. 

  115. 	"Content-type: text/html; charset=us-ascii\r\n"
    116. 

  116. 	"\r\n"
    117. 

  117. 	"<html><head><title>503 Service Unavailable</title></head>\r\n"
    118. 

  118. 	"<body><h2>503 Service Unavailable</h2><h3>Your request violates configured policy</h3></body></html>\r\n",
    119. 

  119. 

  120. /* 16*/	"HTTP/1.0 401 Authentication Required\r\n"
    121. 

  121. 	"WWW-Authenticate: basic realm=\"FTP Server\"\r\n"
    122. 

  122. 	"Proxy-Connection: close\r\n"
    123. 

  123. 	"Content-type: text/html; charset=us-ascii\r\n"
    124. 

  124. 	"\r\n"
    125. 

  125. 	"<html><head><title>401 FTP Server requires authentication</title></head>\r\n"
    126. 

  126. 	"<body><h2>401 FTP Server requires authentication</h2><h3>This FTP server rejects anonymous access</h3></body></html>\r\n",
    127. 

  127. 

  128. /* 17*/ "HTTP/1.1 100 Continue\r\n"
    129. 

  129. 	"\r\n",
    130. 

  130. 

  131. 	NULL
    132. 

  132. };
    133. 

  133. 

  134. #define BUFSIZE 8192
    135. 

  135. #define LINESIZE 4096
    136. 

  136. #define FTPBUFSIZE 1536
    137. 

  137. 

  138. static void logurl(struct clientparam * param, char * buf, char * req, int ftp){
    139. 

  139.  char *sb;
    140. 

  140.  char *se;
    141. 

  141.  int len;
    142. 

  142. 

  143.  if(!buf) req = NULL;
    144. 

  144.  if(req) {
    145. 

  145. 	len = (int)strlen(req);
    146. 

  146. 	if(len > (LINESIZE - 1)) len = LINESIZE - 1;
    147. 

  147. 	memcpy(buf, req, len + 1);
    148. 

  148. 	buf[LINESIZE - 1] = 0;
    149. 

  149. 	sb = strchr(buf, '\r');
    150. 

  150. 	if(sb)*sb = 0;
    151. 

  151. 	if(ftp && (se = strchr(buf + 10, ':')) && (sb = strchr(se, '@')) ) {
    152. 

  152. 		strcpy(se, sb);
    153. 

  153. 	}
    154. 

  154.  }
    155. 

  155.  if(param->res != 555)(*param->srv->logfunc)(param, (unsigned char *)(req?buf:NULL));
    156. 

  156. }
    157. 

  157. 

  158. void decodeurl(unsigned char *s, int allowcr){
    159. 

  159.  unsigned char *d = s;
    160. 

  160.  unsigned u;
    161. 

  161. 

  162.  while(*s){
    163. 

  163. 	if(*s == '%' && ishex(s[1]) && ishex(s[2])){
    164. 

  164. 		sscanf((char *)s+1, "%2x", &u);
    165. 

  165. 		if(allowcr && u != '\r')*d++ = u;
    166. 

  166. 		else if (u != '\r' && u != '\n') {
    167. 

  167. 			if (u == '\"' || u == '\\') *d++ = '\\';
    168. 

  168. 			else if (u == 255) *d++ = 255;
    169. 

  169. 			*d++ = u;
    170. 

  170. 		}
    171. 

  171. 		s+=3;
    172. 

  172. 	}
    173. 

  173. 	else if(!allowcr && *s == '?') {
    174. 

  174. 		break;
    175. 

  175. 	}
    176. 

  176. 	else if(*s == '+') {
    177. 

  177. 		*d++ = ' ';
    178. 

  178. 		s++;
    179. 

  179. 	}
    180. 

  180. 	else {
    181. 

  181. 		*d++ = *s++;
    182. 

  182. 	}
    183. 

  183.  }
    184. 

  184.  *d = 0;
    185. 

  185. }
    186. 

  186. 

  187. void file2url(unsigned char *sb, unsigned char *buf, unsigned bufsize, int * inbuf, int skip255){
    188. 

  188.  for(; *sb; sb++){
    189. 

  189. 	if((bufsize - *inbuf)<16)break;
    190. 

  190. 	if(*sb=='\r'||*sb=='\n')continue;
    191. 

  191. 	if(isallowed(*sb))buf[(*inbuf)++]=*sb;
    192. 

  192. 	else if(*sb == '\"'){
    193. 

  193. 		memcpy(buf+*inbuf, "%5C%22", 6);
    194. 

  194. 		(*inbuf)+=6;
    195. 

  195. 	}
    196. 

  196. 	else if(skip255 && *sb == 255 && *(sb+1) == 255) {
    197. 

  197. 		memcpy(buf+*inbuf, "%ff", 3);
    198. 

  198. 		(*inbuf)+=3;
    199. 

  199. 		sb++;
    200. 

  200.         }
    201. 

  201. 	else {
    202. 

  202. 		sprintf((char *)buf+*inbuf, "%%%.2x", (unsigned)*sb);
    203. 

  203. 		(*inbuf)+=3;
    204. 

  204. 	}
    205. 

  205.  }
    206. 

  206. }
    207. 

  207. 

  208. 

  209. void * proxychild(struct clientparam* param) {
    210. 

  210.  int res=0, i=0;
    211. 

  211.  unsigned char* buf = NULL, *newbuf;
    212. 

  212.  int inbuf;
    213. 

  213.  int bufsize;
    214. 

  214.  unsigned reqlen = 0;
    215. 

  215.  unsigned char	*sb=NULL, *sg=NULL, *se=NULL, *sp=NULL,
    216. 

  216. 		*req=NULL, *su=NULL, *ss = NULL;
    217. 

  217.  unsigned char *ftpbase=NULL;
    218. 

  218.  unsigned char username[1024];
    219. 

  219.  int keepalive = 0;
    220. 

  220.  uint64_t contentlength64 = 0;
    221. 

  221.  int hascontent =0;
    222. 

  222.  int isconnect = 0;
    223. 

  223.  int redirect = 0;
    224. 

  224.  int prefix = 0, ckeepalive=0;
    225. 

  225.  int ftp = 0;
    226. 

  226.  int anonymous;
    227. 

  227.  int sleeptime = 0;
    228. 

  228.  int reqsize, reqbufsize;
    229. 

  229.  int authenticate;
    230. 

  230.  struct pollfd fds[2];
    231. 

  231.  SOCKET ftps;
    232. 

  232.  char ftpbuf[FTPBUFSIZE];
    233. 

  233.  int inftpbuf = 0;
    234. 

  234. #ifndef WITHMAIN
    235. 

  235.  FILTER_ACTION action;
    236. 

  236. #endif
    237. 

  237. 

  238. 

  239. 

  240.  
    241. 

  241.  if(!(buf = myalloc(BUFSIZE))) {RETURN(21);}
    242. 

  242.  bufsize = BUFSIZE;
    243. 

  243.  anonymous = param->srv->singlepacket;
    244. 

  244. for(;;){
    245. 

  245.  memset(buf, 0, bufsize);
    246. 

  246.  inbuf = 0;
    247. 

  247. 

  248. 

  249.  if(keepalive && (param->cliinbuf == param->clioffset) && (param->remsock != INVALID_SOCKET)){
    250. 

  250. 	memset(fds, 0, sizeof(fds));
    251. 

  251. 	fds[0].fd = param->clisock;
    252. 

  252. 	fds[0].events = POLLIN;
    253. 

  253. 	fds[1].fd = param->remsock;
    254. 

  254. 	fds[1].events = POLLIN;
    255. 

  255. 	res = so._poll(fds, 2, conf.timeouts[STRING_S]*1000);
    256. 

  256. 	if(res<=0) {
    257. 

  257. 		RETURN(555);
    258. 

  258. 	}
    259. 

  259. 	if((fds[1].revents & (POLLIN|POLLHUP|POLLERR|POLLNVAL))) {
    260. 

  260. 		if(param->transparent || (!param->redirected && param->redirtype == R_HTTP)) RETURN(555);
    261. 

  261. 		ckeepalive = 0;
    262. 

  262. 		so._shutdown(param->remsock, SHUT_RDWR);
    263. 

  263. 		so._closesocket(param->remsock);
    264. 

  264. 		param->remsock = INVALID_SOCKET;
    265. 

  265. 		param->redirected = 0;
    266. 

  266. 		param->redirtype = 0;
    267. 

  267. 	}
    268. 

  268.  }
    269. 

  269. 

  270.  i = sockgetlinebuf(param, CLIENT, buf, LINESIZE - 1, '\n', conf.timeouts[STRING_L]);
    271. 

  271.  if(i<=0) {
    272. 

  272. 	RETURN((keepalive)?555:(i)?507:508);
    273. 

  273.  }
    274. 

  274.  if (i==2 && buf[0]=='\r' && buf[1]=='\n') continue;
    275. 

  275.  buf[i] = 0;
    276. 

  276.  
    277. 

  277.  if(req) {
    278. 

  278. 	if(!param->transparent && !param->srv->transparent && param->redirtype != R_HTTP && (i<=prefix || strncasecmp((char *)buf, (char *)req, prefix))){
    279. 

  279. 		ckeepalive = 0;
    280. 

  280. 		if(param->remsock != INVALID_SOCKET){
    281. 

  281. 			so._shutdown(param->remsock, SHUT_RDWR);
    282. 

  282. 			so._closesocket(param->remsock);
    283. 

  283. 		}
    284. 

  284. 		param->remsock = INVALID_SOCKET;
    285. 

  285. 		param->redirected = 0;
    286. 

  286. 		param->redirtype = 0;
    287. 

  287. 	}
    288. 

  288. 	myfree(req);
    289. 

  289.  }
    290. 

  290.  req = (unsigned char *)mystrdup((char *)buf);
    291. 

  291.  if(!req){RETURN(510);}
    292. 

  292.  if(i<10) {
    293. 

  293. 	RETURN(511);
    294. 

  294.  }
    295. 

  295.  if(buf[i-3] == '1') keepalive = 2; 
    296. 

  296.  if((isconnect = !strncasecmp((char *)buf, "CONNECT", 7))) keepalive = 2;
    297. 

  297. 

  298.  if ((sb=(unsigned char *)(unsigned char *)strchr((char *)buf, ' ')) == NULL) {RETURN(512);}
    299. 

  299.  ss = ++sb;
    300. 

  300.  if(!isconnect) {
    301. 

  301. 	if (!strncasecmp((char *)sb, "http://", 7)) {
    302. 

  302. 		sb += 7;
    303. 

  303. 	}
    304. 

  304. 	else if (!strncasecmp((char *)sb, "ftp://", 6)) {
    305. 

  305. 		ftp = 1;
    306. 

  306. 		sb += 6;
    307. 

  307. 	}
    308. 

  308. 	else if(*sb == '/') {
    309. 

  309. 		param->transparent = 1;
    310. 

  310. 	}
    311. 

  311. 	else {
    312. 

  312. 		RETURN (513);
    313. 

  313. 	}
    314. 

  314.  }
    315. 

  315.  else {
    316. 

  316. 	 if ((se=(unsigned char *)(unsigned char *)strchr((char *)sb, ' ')) == NULL || sb==se) {RETURN (514);}
    317. 

  317. 	 *se = 0;
    318. 

  318.  }
    319. 

  319.  if(!param->transparent || isconnect) {
    320. 

  320. 	if(!isconnect) {
    321. 

  321. 		if ((se=(unsigned char *)(unsigned char *)strchr((char *)sb, '/')) == NULL 
    322. 

  322. 			|| sb==se
    323. 

  323. 			|| !(sg=(unsigned char *)strchr((char *)sb, ' '))) {RETURN (515);}
    324. 

  324. 		if(se > sg) se=sg;
    325. 

  325.  		*se = 0;
    326. 

  326. 	}
    327. 

  327. 	prefix = (int)(se - buf);
    328. 

  328. 	su = (unsigned char*)strrchr((char *)sb, '@');
    329. 

  329. 	if(su) {
    330. 

  330. 		su = mystrdup(sb);
    331. 

  331. 		decodeurl(su, 0);
    332. 

  332. 		parseconnusername((char *)su, (struct clientparam *)param, 1, (unsigned short)((ftp)?21:80));
    333. 

  333. 		myfree(su);
    334. 

  334. 	}
    335. 

  335. 	else parsehostname((char *)sb, (struct clientparam *)param, (unsigned short)((ftp)? 21:80));
    336. 

  336. 	if(!isconnect){
    337. 

  337. 		if(se==sg)*se-- = ' ';
    338. 

  338. 		*se = '/';
    339. 

  339. 		memmove(ss, se, i - (se - sb) + 1);
    340. 

  340. 	}
    341. 

  341.  }
    342. 

  342.  reqlen = i = (int)strlen((char *)buf);
    343. 

  343.  if(!strncasecmp((char *)buf, "CONNECT", 7))param->operation = HTTP_CONNECT;
    344. 

  344.  else if(!strncasecmp((char *)buf, "GET", 3))param->operation = (ftp)?FTP_GET:HTTP_GET;
    345. 

  345.  else if(!strncasecmp((char *)buf, "PUT", 3))param->operation = (ftp)?FTP_PUT:HTTP_PUT;
    346. 

  346.  else if(!strncasecmp((char *)buf, "POST", 4)||!strncasecmp((char *)buf, "BITS_POST", 9))param->operation = HTTP_POST;
    347. 

  347.  else if(!strncasecmp((char *)buf, "HEAD", 4))param->operation = HTTP_HEAD;
    348. 

  348.  else param->operation = HTTP_OTHER;
    349. 

  349.  do {
    350. 

  350. 	buf[inbuf+i]=0;
    351. 

  351. /*printf("Got: %s\n", buf+inbuf);*/
    352. 

  352. #ifndef WITHMAIN
    353. 

  353. 	if(i > 25 && !param->srv->transparent && (!strncasecmp((char *)(buf+inbuf), "proxy-authorization", 19))){
    354. 

  354. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    355. 

  355. 		if(!sb)continue;
    356. 

  356. 		++sb;
    357. 

  357. 		while(isspace(*sb))sb++;
    358. 

  358. 		if(!*sb) continue;
    359. 

  359. 		if(!strncasecmp((char *)sb, "basic", 5)){
    360. 

  360. 			sb+=5;
    361. 

  361. 			while(isspace(*sb))sb++;
    362. 

  362. 			i = de64(sb, username, 255);
    363. 

  363. 			if(i<=0)continue;
    364. 

  364. 			username[i] = 0;
    365. 

  365. 			sb = (unsigned char *)strchr((char *)username, ':');
    366. 

  366. 			if(sb){
    367. 

  367. 				*sb = 0;
    368. 

  368. 				if(param->password)myfree(param->password);
    369. 

  369. 				param->password = (unsigned char *)mystrdup((char *)sb+1);
    370. 

  370. 				param->pwtype = 0;
    371. 

  371. 			}
    372. 

  372. 			if(param->username)myfree(param->username);
    373. 

  373. 			param->username = (unsigned char *)mystrdup((char *)username);
    374. 

  374. 			continue;
    375. 

  375. 		}
    376. 

  376. #ifndef NOCRYPT
    377. 

  377. 		if(param->srv->usentlm && !strncasecmp((char *)sb, "ntlm", 4)){
    378. 

  378. 			sb+=4;
    379. 

  379. 			while(isspace(*sb))sb++;
    380. 

  380. 			i = de64(sb, username, 1023);
    381. 

  381. 			if(i<=16)continue;
    382. 

  382. 			username[i] = 0;
    383. 

  383. 			if(strncasecmp((char *)username, "NTLMSSP", 8)) continue;
    384. 

  384. 			if(username[8] == 1) {
    385. 

  385. 				while( (i = sockgetlinebuf(param, CLIENT, buf, BUFSIZE - 1, '\n', conf.timeouts[STRING_S])) > 2){
    386. 

  386. 					if(i> 15 && (!strncasecmp((char *)(buf), "content-length", 14))){
    387. 

  387. 						buf[i]=0;
    388. 

  388. 						sscanf((char *)buf + 15, "%"PRINTF_INT64_MODIFIER"u", &contentlength64);
    389. 

  389. 					}
    390. 

  390. 				}
    391. 

  391. 				while( contentlength64 > 0 && (i = sockgetlinebuf(param, CLIENT, buf, (BUFSIZE < contentlength64)? BUFSIZE - 1:(int)contentlength64, '\n', conf.timeouts[STRING_S])) > 0){
    392. 

  392. 					if ((uint64_t)i > contentlength64) break;
    393. 

  393. 					contentlength64-=i;
    394. 

  394. 				}
    395. 

  395. 				contentlength64 = 0;
    396. 

  396. 				if(param->password)myfree(param->password);
    397. 

  397. 				param->password = myalloc(32);
    398. 

  398. 				param->pwtype = 2;
    399. 

  399. 				i = (int)strlen(proxy_stringtable[13]);
    400. 

  400. 				memcpy(buf, proxy_stringtable[13], i);
    401. 

  401. 				genchallenge(param, (char *)param->password, (char *)buf + i);
    402. 

  402. 				memcpy(buf + strlen((char *)buf), "\r\n\r\n", 5);
    403. 

  403. 				socksend(param->clisock, buf, (int)strlen((char *)buf), conf.timeouts[STRING_S]);
    404. 

  404. 				ckeepalive = keepalive = 1;
    405. 

  405. 				goto REQUESTEND;
    406. 

  406. 			}
    407. 

  407. 			if(username[8] == 3 && param->pwtype == 2 && i>=80) {
    408. 

  408. 				unsigned offset, len;
    409. 

  409. 

  410. 				len = username[20] + (((unsigned)username[21]) << 8);
    411. 

  411. 				offset = username[24] + (((unsigned)username[25]) << 8);
    412. 

  412. 				if(len != 24 || len + offset > (unsigned)i) continue;
    413. 

  413. 				memcpy(param->password + 8, username + offset, 24);
    414. 

  414. 				len = username[36] + (((unsigned)username[37]) << 8);
    415. 

  415. 				offset = username[40] + (((unsigned)username[41]) << 8);
    416. 

  416. 				if(len> 255 || len + offset > (unsigned)i) continue;
    417. 

  417. 				if(param->username) myfree(param->username);
    418. 

  418. 				unicode2text((char *)username+offset, (char *)username+offset, (len>>1));
    419. 

  419. 				param->username = (unsigned char *)mystrdup((char *)username+offset);
    420. 

  420. 			}
    421. 

  421. 			continue;
    422. 

  422. 		}
    423. 

  423. #endif
    424. 

  424. 	}
    425. 

  425. #endif
    426. 

  426. 	if(!isconnect && (
    427. 

  427. 			(i> 25 && !strncasecmp((char *)(buf+inbuf), "proxy-connection:", 17))
    428. 

  428. 			||
    429. 

  429. 			(i> 16 && (!strncasecmp((char *)(buf+inbuf), "connection:", 11)))
    430. 

  430. 			)){
    431. 

  431. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    432. 

  432. 		if(!sb)continue;
    433. 

  433. 		++sb;
    434. 

  434. 		while(isspace(*sb))sb++;
    435. 

  435. 		if(!strncasecmp((char *)sb,"keep-alive", 10))keepalive = 1;
    436. 

  436. 		else keepalive = 0;
    437. 

  437. 		continue; 
    438. 

  438. 	}
    439. 

  439. 	if( i > 11 && !strncasecmp((char *)(buf+inbuf),  "Expect: 100", 11)){
    440. 

  440. 		keepalive = 1;
    441. 

  441. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[17], (int)strlen(proxy_stringtable[17]), conf.timeouts[STRING_S]);
    442. 

  442. 		continue;
    443. 

  443. 	}
    444. 

  444. 	if(param->transparent && i > 6 && !strncasecmp((char *)buf + inbuf, "Host:", 5)){
    445. 

  445. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    446. 

  446. 		if(!sb)continue;
    447. 

  447. 		++sb;
    448. 

  448. 		while(isspace(*sb))sb++;
    449. 

  449. 		se = (unsigned char *)strchr((char *)sb, '\r');
    450. 

  450. 		if(se) *se = 0;
    451. 

  451. 		if(!param->hostname){
    452. 

  452. 			parsehostname((char *)sb, param, 80);
    453. 

  453. 		}
    454. 

  454. 		newbuf = myalloc(strlen((char *)req) + strlen((char *)(buf+inbuf)) + 8);
    455. 

  455. 		if(newbuf){
    456. 

  456. 			sp = (unsigned char *)strchr((char *)req+1, '/');
    457. 

  457. 			memcpy(newbuf, req, (sp - req));
    458. 

  458. 			sprintf((char*)newbuf + (sp - req), "http://%s%s",sb,sp);
    459. 

  459. 			myfree(req);
    460. 

  460. 			req = newbuf;
    461. 

  461. 		}
    462. 

  462. 		if(se)*se = '\r';
    463. 

  463. 	}
    464. 

  464. 	if(ftp && i > 13 && (!strncasecmp((char *)(buf+inbuf), "authorization", 13))){
    465. 

  465. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    466. 

  466. 		if(!sb)continue;
    467. 

  467. 		++sb;
    468. 

  468. 		while(isspace(*sb))sb++;
    469. 

  469. 		if(!*sb) continue;
    470. 

  470. 		if(!strncasecmp((char *)sb, "basic", 5)){
    471. 

  471. 			sb+=5;
    472. 

  472. 			while(isspace(*sb))sb++;
    473. 

  473. 			i = de64(sb, username, 255);
    474. 

  474. 			if(i<=0)continue;
    475. 

  475. 			username[i] = 0;
    476. 

  476. 			sb = (unsigned char *)strchr((char *)username, ':');
    477. 

  477. 			if(sb){
    478. 

  478. 				*sb = 0;
    479. 

  479. 				if(param->extpassword)myfree(param->extpassword);
    480. 

  480. 				param->extpassword = (unsigned char *)mystrdup((char *)sb+1);
    481. 

  481. 			}
    482. 

  482. 			if(param->extusername)myfree(param->extusername);
    483. 

  483. 			param->extusername = (unsigned char *)mystrdup((char *)username);
    484. 

  484. 			continue;
    485. 

  485. 		}
    486. 

  486. 	}
    487. 

  487. 	if(i> 15 && (!strncasecmp((char *)(buf+inbuf), "content-length", 14))){
    488. 

  488. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    489. 

  489. 		if(!sb)continue;
    490. 

  490. 		++sb;
    491. 

  491. 		while(isspace(*sb))sb++;
    492. 

  492. 		sscanf(sb, "%"PRINTF_INT64_MODIFIER"u",&contentlength64);
    493. 

  493. 		if(param->maxtrafout64 && (param->maxtrafout64 < param->statscli64 || contentlength64 > param->maxtrafout64 - param->statscli64)){
    494. 

  494. 			RETURN(10);
    495. 

  495. 		}
    496. 

  496. 		if(param->ndatfilterscli > 0 && contentlength64 > 0) continue;
    497. 

  497. 	}
    498. 

  498. 	inbuf += i;
    499. 

  499. 	if((bufsize - inbuf) < LINESIZE){
    500. 

  500. 		if (bufsize > (LINESIZE * 16)){
    501. 

  501. 			RETURN (516);
    502. 

  502. 		}
    503. 

  503. 		if(!(newbuf = myrealloc(buf, bufsize + BUFSIZE))){RETURN (21);}
    504. 

  504. 		buf = newbuf;
    505. 

  505. 		bufsize += BUFSIZE;
    506. 

  506. 	}
    507. 

  507.  } while( (i = sockgetlinebuf(param, CLIENT, buf + inbuf, LINESIZE - 2, '\n', conf.timeouts[STRING_S])) > 2);
    508. 

  508. 

  509. 

  510.  buf[inbuf] = 0;
    511. 

  511. 

  512.  reqsize = (int)strlen(req);
    513. 

  513.  reqbufsize = reqsize + 1;
    514. 

  514. 

  515. #ifndef WITHMAIN
    516. 

  516. 

  517.  action = handlereqfilters(param, &req, &reqbufsize, 0, &reqsize);
    518. 

  518.  if(action == HANDLED){
    519. 

  519. 	RETURN(0);
    520. 

  520.  }
    521. 

  521.  if(action != PASS) RETURN(517);
    522. 

  522.  action = handlehdrfilterscli(param, &buf, &bufsize, 0, &inbuf);
    523. 

  523.  if(action == HANDLED){
    524. 

  524. 	RETURN(0);
    525. 

  525.  }
    526. 

  526.  if(action != PASS) RETURN(517);
    527. 

  527.  if(param->ndatfilterscli > 0 && contentlength64 > 0){
    528. 

  528.   uint64_t newlen64;
    529. 

  529.   newlen64 = sockfillbuffcli(param, (unsigned long)contentlength64, CONNECTION_S);
    530. 

  530.   if(newlen64 == contentlength64) {
    531. 

  531. 	action = handledatfltcli(param,  &param->clibuf, &param->clibufsize, 0, &param->cliinbuf);
    532. 

  532. 	if(action == HANDLED){
    533. 

  533. 		RETURN(0);
    534. 

  534. 	}
    535. 

  535. 	if(action != PASS) RETURN(517);
    536. 

  536. 	contentlength64 = param->cliinbuf;
    537. 

  537. 	param->ndatfilterscli = 0;
    538. 

  538.   }
    539. 

  539.   sprintf((char*)buf+strlen((char *)buf), "Content-Length: %"PRINTF_INT64_MODIFIER"u\r\n", contentlength64);
    540. 

  540.  }
    541. 

  541. 

  542. #endif
    543. 

  543. 

  544.  if((res = (*param->srv->authfunc)(param))) {RETURN(res);}
    545. 

  545. 

  546.  if(ftp && param->redirtype != R_HTTP){
    547. 

  547. 	SOCKET s;
    548. 

  548. 	int mode = 0;
    549. 

  549. 	int i=0;
    550. 

  550. 

  551. 	inftpbuf = 0;
    552. 

  552. 	if(!ckeepalive){
    553. 

  553. 		inftpbuf = FTPBUFSIZE - 20;
    554. 

  554. 		res = ftplogin(param, ftpbuf, &inftpbuf);
    555. 

  555. 		if(res){
    556. 

  556. 			RETURN(res);
    557. 

  557. 		}
    558. 

  558. 	}
    559. 

  559. 	ckeepalive = 1;
    560. 

  560. 	if(ftpbase) myfree(ftpbase);
    561. 

  561. 	ftpbase = NULL;
    562. 

  562. 	if(!(sp = (unsigned char *)strchr((char *)ss, ' '))){RETURN(799);}
    563. 

  563. 	*sp = 0;
    564. 

  564. 

  565. 	decodeurl(ss, 0);
    566. 

  566. 	i = (int)strlen((char *)ss);
    567. 

  567. 	if(!(ftpbase = myalloc(i+2))){RETURN(21);}
    568. 

  568. 	memcpy(ftpbase, ss, i);
    569. 

  569. 	if(ftpbase[i-1] != '/') ftpbase[i++] = '/';
    570. 

  570. 	ftpbase[i] = 0;
    571. 

  571. 	memcpy(buf, "<pre><hr>\n", 10);
    572. 

  572. 	inbuf = 10;
    573. 

  573. 	if(inftpbuf) {
    574. 

  574. 		memcpy(buf+inbuf, ftpbuf, inftpbuf);
    575. 

  575. 		inbuf += inftpbuf;
    576. 

  576. 		memcpy(buf+inbuf, "<hr>", 4);
    577. 

  577. 		inbuf += 4;
    578. 

  578. 	}
    579. 

  579. 	if(ftpbase[1] != 0){
    580. 

  580. 		memcpy(buf+inbuf, "[<A HREF=\"..\">..</A>]\n", 22);
    581. 

  581. 		inbuf += 22;
    582. 

  582. 	}
    583. 

  583. 	inftpbuf = FTPBUFSIZE - (20 + inftpbuf);
    584. 

  584. 	res = ftpcd(param, ftpbase, ftpbuf, &inftpbuf);
    585. 

  585. 	if(res){
    586. 

  586. 		res = ftptype(param, (unsigned char *)"I");
    587. 

  587. 		if(res)RETURN(res);
    588. 

  588. 		ftpbase[--i] = 0;
    589. 

  589. 		ftps = ftpcommand(param, param->operation == FTP_PUT? (unsigned char *)"PUT" : (unsigned char *)"RETR", ftpbase);
    590. 

  590. 	}
    591. 

  591. 	else {
    592. 

  592. 		if(inftpbuf){
    593. 

  593. 			memcpy(buf+inbuf, ftpbuf, inftpbuf);
    594. 

  594. 			inbuf += inftpbuf;
    595. 

  595. 			memcpy(buf+inbuf, "<hr>", 4);
    596. 

  596. 			inbuf += 4;
    597. 

  597. 		}
    598. 

  598. 		ftps = ftpcommand(param, (unsigned char *)"LIST", NULL);
    599. 

  599. 		mode = 1;
    600. 

  600. 	}
    601. 

  601. 	if(ftps == INVALID_SOCKET){RETURN(780);}
    602. 

  602. 	if(!mode){
    603. 

  603. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[8], (int)strlen(proxy_stringtable[8]), conf.timeouts[STRING_S]);
    604. 

  604. 		s = param->remsock;
    605. 

  605. 		param->remsock = ftps;
    606. 

  606. 		if((param->operation == FTP_PUT) && (contentlength64 > 0)) param->waitclient64 = contentlength64;
    607. 

  607. 		res = sockmap(param, conf.timeouts[CONNECTION_L]);
    608. 

  608. 		if (res == 99) res = 0;
    609. 

  609. 		so._closesocket(ftps);
    610. 

  610. 		ftps = INVALID_SOCKET;
    611. 

  611. 		param->remsock = s;
    612. 

  612. 	}
    613. 

  613. 	else {
    614. 

  614. 		int headsent = 0;
    615. 

  615. 		int gotres = -1;
    616. 

  616. 

  617. 		s = param->remsock;
    618. 

  618. 		if(param->srvoffset < param->srvinbuf){
    619. 

  619. 			gotres = ftpres(param, buf+inbuf, bufsize-(inbuf+100));
    620. 

  620. 			if(gotres) inbuf= (int)strlen((char *)buf);
    621. 

  621. 		}
    622. 

  622. 			
    623. 

  623. 		param->remsock = ftps;
    624. 

  624. 		if(gotres <= 0) for(; (res = sockgetlinebuf(param, SERVER, (unsigned char *)ftpbuf, FTPBUFSIZE - 20, '\n', conf.timeouts[STRING_S])) > 0; i++){
    625. 

  625. 			int isdir = 0;
    626. 

  626. 			int islink = 0;
    627. 

  627. 			int filetoken =-1;
    628. 

  628. 			int sizetoken =-1;
    629. 

  629. 			int modetoken =-1;
    630. 

  630. 			int datetoken =-1;
    631. 

  631. 			int spaces = 1;
    632. 

  632. 			unsigned char * tokens[10];
    633. 

  633. 			unsigned wordlen [10];
    634. 

  634. 			unsigned char j=0;
    635. 

  635. 			int space = 1;
    636. 

  636. 

  637. 			ftpbuf[res] = 0;
    638. 

  638. 			if(!i && ftpbuf[0] == 't' && ftpbuf[1] == 'o' && ftpbuf[2] == 't'){
    639. 

  639. 				mode = 2;
    640. 

  640. 				continue;
    641. 

  641. 			}
    642. 

  642. 			if(!isnumber(*ftpbuf) && mode == 1) mode = 2;
    643. 

  643. 			for(sb=(unsigned char *)ftpbuf; *sb; sb++){
    644. 

  644. 				if(!space && isspace(*sb)){
    645. 

  645. 					space = 1;
    646. 

  646. 					wordlen[j]=(unsigned)(sb-tokens[j]);
    647. 

  647. 					j++;
    648. 

  648. 				}
    649. 

  649. 				if(space && !isspace(*sb)){
    650. 

  650. 					space = 0;
    651. 

  651. 					tokens[j] = sb;
    652. 

  652. 					if(j==8)break;
    653. 

  653. 				}				
    654. 

  654. 			}
    655. 

  655. 			if(mode == 1){
    656. 

  656. 				if(j < 4) continue;
    657. 

  657. 				if(!(isdir = !memcmp(tokens[2], "<DIR>", wordlen[2])) && !isnumber(*tokens[2])){
    658. 

  658. 					continue;
    659. 

  659. 				}
    660. 

  660. 				datetoken = 0;
    661. 

  661. 				wordlen[datetoken] = ((unsigned)(tokens[1] - tokens[0])) + wordlen[1];
    662. 

  662. 				sizetoken = 2;
    663. 

  663. 				filetoken = 3;
    664. 

  664. 				spaces = 10;
    665. 

  665. 			}
    666. 

  666. 			else {
    667. 

  667. 				if(j < 8 || wordlen[0]!=10) continue;
    668. 

  668. 				if(j < 8 || !isnumber(*tokens[4])) mode = 3;
    669. 

  669. 				if(*tokens[0] == 'd') isdir = 1;
    670. 

  670. 				if(*tokens[0] == 'l') islink = 1;
    671. 

  671. 				modetoken = 0;
    672. 

  672. 				sizetoken = (mode == 2)? 4:3;
    673. 

  673. 				filetoken = (mode == 2)? 8:7;
    674. 

  674. 				datetoken = (mode == 2)? 5:4;
    675. 

  675. 				tokens[filetoken] = tokens[filetoken-1];
    676. 

  676. 				while(*tokens[filetoken] && !isspace(*tokens[filetoken]))tokens[filetoken]++;
    677. 

  677. 				if(*tokens[filetoken]){
    678. 

  678. 					tokens[filetoken]++;
    679. 

  679. 				}
    680. 

  680. 				wordlen[datetoken] = (unsigned)(tokens[filetoken] - tokens[datetoken]);
    681. 

  681. 				wordlen[filetoken] = (unsigned)strlen((char *)tokens[filetoken]);
    682. 

  682. 			}
    683. 

  683. 

  684. 			if(modetoken >= 0) memcpy(buf+inbuf, tokens[modetoken], 11);
    685. 

  685. 			else memcpy(buf+inbuf, "---------- ", 11);
    686. 

  686. 			inbuf += 11;
    687. 

  687. 			if((int) wordlen[datetoken]+256 > bufsize-inbuf) continue;
    688. 

  688. 			memcpy(buf+inbuf, tokens[datetoken], wordlen[datetoken]);
    689. 

  689. 			inbuf += wordlen[datetoken];
    690. 

  690. 			if(isdir){
    691. 

  691. 				memcpy(buf+inbuf, "       DIR", 10);
    692. 

  692. 				inbuf+=10;
    693. 

  693. 			}
    694. 

  694. 			else if(islink){
    695. 

  695. 				memcpy(buf+inbuf, "      LINK", 10);
    696. 

  696. 				inbuf+=10;
    697. 

  697. 			}
    698. 

  698. 			else{
    699. 

  699. 				unsigned k;
    700. 

  700. 				if(wordlen[sizetoken]>10) wordlen[sizetoken] = 10;
    701. 

  701. 				for(k=10; k > wordlen[sizetoken]; k--){
    702. 

  702. 					buf[inbuf++] = ' ';
    703. 

  703. 				}
    704. 

  704. 				memcpy(buf+inbuf, tokens[sizetoken], wordlen[sizetoken]);
    705. 

  705. 				inbuf+=wordlen[sizetoken];
    706. 

  706. 			}
    707. 

  707. 			memcpy(buf+inbuf, " <A HREF=\"", 10);
    708. 

  708. 			inbuf+=10;
    709. 

  709. 			sb = NULL;
    710. 

  710. 			if(islink) sb = (unsigned char *)strstr((char *)tokens[filetoken], " -> ");
    711. 

  711. 			if(sb) sb+=4;
    712. 

  712. 

  713. 			else sb=tokens[filetoken]; 
    714. 

  714. 			if(*sb != '/' && ftpbase)file2url(ftpbase, buf, bufsize, (int *)&inbuf, 1);
    715. 

  715. 			file2url(sb, buf, bufsize, (int *)&inbuf, 0);
    716. 

  716. 

  717. 			if(isdir)buf[inbuf++] = '/';
    718. 

  718. 			memcpy(buf+inbuf, "\">", 2);
    719. 

  719. 			inbuf+=2;
    720. 

  720. 			for(sb=tokens[filetoken]; *sb; sb++){
    721. 

  721. 				if((bufsize - inbuf)<16)break;
    722. 

  722. 				if(*sb == '<'){
    723. 

  723. 					memcpy(buf+inbuf, "&lt;", 4);
    724. 

  724. 					inbuf+=4;
    725. 

  725. 				}
    726. 

  726. 				else if(*sb == '>'){
    727. 

  727. 					memcpy(buf+inbuf, "&gt;", 4);
    728. 

  728. 					inbuf+=4;
    729. 

  729. 				}
    730. 

  730. 				else if(*sb == '\r' || *sb=='\n'){
    731. 

  731. 					continue;
    732. 

  732. 				}
    733. 

  733. 				else if(islink && sb[0] == ' ' && sb[1] == '-' 
    734. 

  734. 				 && sb[2] == '>'){
    735. 

  735. 					memcpy(buf+inbuf, "</A> ", 5);
    736. 

  736. 					inbuf+=5;
    737. 

  737. 				}
    738. 

  738. 				else buf[inbuf++]=*sb;
    739. 

  739. 			}
    740. 

  740. 			if(islink!=2){
    741. 

  741. 				memcpy(buf+inbuf, "</A>", 4);
    742. 

  742. 				inbuf+=4;
    743. 

  743. 			}
    744. 

  744. 			buf[inbuf++] = '\n';
    745. 

  745. 

  746. 			if((bufsize - inbuf) < LINESIZE){
    747. 

  747. 				if (bufsize > 20000){
    748. 

  748. 					if(!headsent++){
    749. 

  749. 						socksend(param->clisock, (unsigned char *)proxy_stringtable[9], (int)strlen(proxy_stringtable[9]), conf.timeouts[STRING_S]);
    750. 

  750. 					}
    751. 

  751. 					if((unsigned)socksend(param->clisock, buf, inbuf, conf.timeouts[STRING_S]) != inbuf){
    752. 

  752. 						RETURN(781);
    753. 

  753. 					}
    754. 

  754. 					inbuf = 0;
    755. 

  755. 				}
    756. 

  756. 				else {
    757. 

  757. 					if(!(newbuf = myrealloc(buf, bufsize + BUFSIZE))){RETURN (21);}
    758. 

  758. 					buf = newbuf;
    759. 

  759. 					bufsize += BUFSIZE;
    760. 

  760. 				}
    761. 

  761. 			}
    762. 

  762. 		}
    763. 

  763. 		memcpy(buf+inbuf, "<hr>", 4);
    764. 

  764. 		inbuf += 4;
    765. 

  765. 		so._closesocket(ftps);
    766. 

  766. 		ftps = INVALID_SOCKET;
    767. 

  767. 		param->remsock = s;
    768. 

  768. 		if(inbuf){
    769. 

  769. 			buf[inbuf] = 0;
    770. 

  770. 			if(gotres < 0 ) res = ftpres(param, buf+inbuf, bufsize-inbuf);
    771. 

  771. 			else res = gotres;
    772. 

  772. 			inbuf = (int)strlen((char *)buf);
    773. 

  773. 			if(!headsent){
    774. 

  774. 				sprintf(ftpbuf, 
    775. 

  775. 					"HTTP/1.0 200 OK\r\n"
    776. 

  776. 					"Content-Type: text/html\r\n"
    777. 

  777. 					"Proxy-Connection: keep-alive\r\n"
    778. 

  778. 					"Content-Length: %d\r\n\r\n",
    779. 

  779. 					inbuf);
    780. 

  780. 				socksend(param->clisock, (unsigned char *)ftpbuf, (int)strlen(ftpbuf), conf.timeouts[STRING_S]);
    781. 

  781. 			}
    782. 

  782. 			socksend(param->clisock, buf, inbuf, conf.timeouts[STRING_S]);
    783. 

  783. 			if(res){RETURN(res);}
    784. 

  784. 			if(!headsent)goto REQUESTEND;
    785. 

  785. 		}
    786. 

  786. 		RETURN(0);
    787. 

  787. 	}
    788. 

  788. 	RETURN(res);
    789. 

  789.  }
    790. 

  790. 

  791.  if(isconnect && param->redirtype != R_HTTP) {
    792. 

  792. 	socksend(param->clisock, (unsigned char *)proxy_stringtable[8], (int)strlen(proxy_stringtable[8]), conf.timeouts[STRING_S]);
    793. 

  793. 	if(param->redirectfunc) return (*param->redirectfunc)(param);
    794. 

  794. 	param->res =  sockmap(param, conf.timeouts[CONNECTION_L]);
    795. 

  795. 	if(param->redirectfunc) return (*param->redirectfunc)(param);
    796. 

  796. 	RETURN(param->res);
    797. 

  797.  }
    798. 

  798. 

  799.  if(!req || param->redirtype != R_HTTP) {
    800. 

  800. 	reqlen = 0;
    801. 

  801.  }
    802. 

  802. 

  803.  else {
    804. 

  804. 	 redirect = 1;
    805. 

  805. 	 if(socksend(param->remsock, req , (res = (int)strlen((char *)req)), conf.timeouts[STRING_L]) != res) {
    806. 

  806. 		RETURN(518);
    807. 

  807. 	 }
    808. 

  808. 	 param->statscli64 += res;
    809. 

  809. 	 param->nwrites++;
    810. 

  810.  }
    811. 

  811.  inbuf = 0;
    812. 

  812. #ifndef ANONYMOUS
    813. 

  813.  if(anonymous!=1){
    814. 

  814. 		sprintf((char*)buf+strlen((char *)buf), "Via: 1.1 ");
    815. 

  815. 		gethostname((char *)(buf+strlen((char *)buf)), 256);
    816. 

  816. 		sprintf((char*)buf+strlen((char *)buf), ":%d (%s %s)\r\nX-Forwarded-For: ", (int)ntohs(*SAPORT(&param->srv->intsa)), conf.stringtable?conf.stringtable[2]:(unsigned char *)"", conf.stringtable?conf.stringtable[3]:(unsigned char *)"");
    817. 

  817. 		if(!anonymous)myinet_ntop(*SAFAMILY(&param->sincr), SAADDR(&param->sincr), (char *)buf + strlen((char *)buf), 128);
    818. 

  818. 		else {
    819. 

  819. 			unsigned long tmp;
    820. 

  820. 

  821. 			tmp = ((unsigned long)myrand(param, sizeof(struct clientparam))<<16)^(unsigned long)rand();
    822. 

  822. 			myinet_ntop(AF_INET, &tmp, (char *)buf + strlen((char *)buf), 64);
    823. 

  823. 		}
    824. 

  824. 		sprintf((char*)buf+strlen((char *)buf), "\r\n");
    825. 

  825.  }
    826. 

  826. #endif
    827. 

  827.  if(keepalive <= 1) sprintf((char*)buf+strlen((char *)buf), "%s: %s\r\n", (param->redirtype == R_HTTP)?"Proxy-Connection":"Connection", keepalive? "keep-alive":"close");
    828. 

  828.  if(param->extusername){
    829. 

  829. 	sprintf((char*)buf + strlen((char *)buf), "%s: basic ", (redirect)?"Proxy-Authorization":"Authorization");
    830. 

  830. 	sprintf((char*)username, "%.128s:%.64s", param->extusername, param->extpassword?param->extpassword:(unsigned char*)"");
    831. 

  831. 	en64(username, buf+strlen((char *)buf), (int)strlen((char *)username));
    832. 

  832. 	sprintf((char*)buf + strlen((char *)buf), "\r\n");
    833. 

  833.  }
    834. 

  834.  sprintf((char*)buf+strlen((char *)buf), "\r\n");
    835. 

  835.  if ((res = socksend(param->remsock, buf+reqlen, (int)strlen((char *)buf+reqlen), conf.timeouts[STRING_S])) != (int)strlen((char *)buf+reqlen)) {
    836. 

  836. 	RETURN(518);
    837. 

  837.  }
    838. 

  838.  param->statscli64 += res;
    839. 

  839.  param->nwrites++;
    840. 

  840.  if(param->bandlimfunc) {
    841. 

  841. 	sleeptime = param->bandlimfunc(param, 0, (int)strlen((char *)buf));
    842. 

  842.  }
    843. 

  843.  if(contentlength64 > 0){
    844. 

  844. 	 param->nolongdatfilter = 0;
    845. 

  845. 	 param->waitclient64 = contentlength64;
    846. 

  846. 	 res = sockmap(param, conf.timeouts[CONNECTION_S]);
    847. 

  847. 	 param->waitclient64 = 0;
    848. 

  848. 	 if(res != 99) {
    849. 

  849. 		RETURN(res);
    850. 

  850. 	}
    851. 

  851.  }
    852. 

  852.  contentlength64 = 0;
    853. 

  853.  inbuf = 0;
    854. 

  854.  ckeepalive = keepalive;
    855. 

  855.  res = 0; 
    856. 

  856.  authenticate = 0;
    857. 

  857.  param->chunked = 0;
    858. 

  858.  hascontent = 0;
    859. 

  859.  
    860. 

  860.  while( (i = sockgetlinebuf(param, SERVER, buf + inbuf, LINESIZE - 1, '\n', conf.timeouts[(res)?STRING_S:STRING_L])) > 2) {
    861. 

  861. 	if(!res && i>9)param->status = res = atoi((char *)buf + inbuf + 9);
    862. 

  862. 	if(((i >= 25 && !strncasecmp((char *)(buf+inbuf), "proxy-connection:", 17))
    863. 

  863. 	   ||
    864. 

  864. 	    (i> 16 && !strncasecmp((char *)(buf+inbuf), "connection:", 11))
    865. 

  865. 			)){
    866. 

  866. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    867. 

  867. 		if(!sb)continue;
    868. 

  868. 		++sb;
    869. 

  869. 		while(isspace(*sb))sb++;
    870. 

  870. 		if(strncasecmp((char *)sb,"keep-alive", 10))ckeepalive = 0;
    871. 

  871. 		if(!param->srv->transparent)continue; 
    872. 

  872. 	}
    873. 

  873. 	else if(i> 6 && !param->srv->transparent && (!strncasecmp((char *)(buf+inbuf), "proxy-", 6))){
    874. 

  874. 		continue; 
    875. 

  875. 	}
    876. 

  876. 	else if(i> 6 && (!strncasecmp((char *)(buf+inbuf), "www-authenticate", 16))){
    877. 

  877. 		authenticate = 1;
    878. 

  878. 	}
    879. 

  879. 	else if(i > 15 && (!strncasecmp((char *)(buf+inbuf), "content-length", 14))){
    880. 

  880. 		buf[inbuf+i]=0;
    881. 

  881. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    882. 

  882. 		if(!sb)continue;
    883. 

  883. 		++sb;
    884. 

  884. 		while(isspace(*sb))sb++;
    885. 

  885. 		sscanf(sb, "%"PRINTF_INT64_MODIFIER"u", &contentlength64);
    886. 

  886. 		hascontent = 1;
    887. 

  887. 		if(param->unsafefilter && param->ndatfilterssrv > 0) {
    888. 

  888. 			hascontent = 2;
    889. 

  889. 			continue;
    890. 

  890. 		}
    891. 

  891. 		if(param->maxtrafin64 && (param->maxtrafin64 < param->statssrv64 || contentlength64 + param->statssrv64 > param->maxtrafin64)){
    892. 

  892. 			RETURN(10);
    893. 

  893. 		}
    894. 

  894. 	}
    895. 

  895. 	else if(i>25 && (!strncasecmp((char *)(buf+inbuf), "transfer-encoding", 17))){
    896. 

  896. 		buf[inbuf+i]=0;
    897. 

  897. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    898. 

  898. 		if(!sb)continue;
    899. 

  899. 		++sb;
    900. 

  900. 		while(isspace(*sb))sb++;
    901. 

  901. 		if(!strncasecmp(sb, "chunked", 7)){
    902. 

  902. 			param->chunked = 1;
    903. 

  903. 		}
    904. 

  904. 	}
    905. 

  905. 	inbuf += i;
    906. 

  906. 	if((bufsize - inbuf) < LINESIZE){
    907. 

  907. 		if (bufsize > 20000){
    908. 

  908. 			RETURN (516);
    909. 

  909. 		}
    910. 

  910. 		if(!(newbuf = myrealloc(buf, bufsize + BUFSIZE))){RETURN (21);}
    911. 

  911. 		buf = newbuf;
    912. 

  912. 		bufsize += BUFSIZE;
    913. 

  913. 	}
    914. 

  914.  }
    915. 

  915.  if(res < 200 || res > 499) {
    916. 

  916. 	ckeepalive = 0;
    917. 

  917.  }
    918. 

  918.  if((res == 304 || res == 204) && !hascontent){
    919. 

  919. 	hascontent = 1;
    920. 

  920. 	contentlength64 = 0;
    921. 

  921.  }
    922. 

  922.  if(param->bandlimfunc) {
    923. 

  923. 	int st1;
    924. 

  924. 

  925. 	st1 = (*param->bandlimfunc)(param, inbuf, 0);
    926. 

  926. 	if(st1 > sleeptime) sleeptime = st1;
    927. 

  927. 	if(sleeptime > 0){
    928. 

  928. /*		if(sleeptime > 30) sleeptime = 30; */
    929. 

  929. 		usleep(sleeptime * SLEEPTIME);
    930. 

  930. 	}
    931. 

  931.  }
    932. 

  932.  buf[inbuf] = 0;
    933. 

  933.  if(inbuf < 9) {RETURN (522);}
    934. 

  934. #ifndef WITHMAIN
    935. 

  935.  action = handlehdrfilterssrv(param, &buf, &bufsize, 0, &inbuf);
    936. 

  936.  if(action == HANDLED){
    937. 

  937. 	RETURN(0);
    938. 

  938.  }
    939. 

  939.  if(action != PASS) RETURN(517);
    940. 

  940. 

  941.  param->nolongdatfilter = 0;
    942. 

  942. 

  943.  
    944. 

  944.  if (conf.filtermaxsize && contentlength64 > (uint64_t)conf.filtermaxsize) {
    945. 

  945. 	param->nolongdatfilter = 1;
    946. 

  946.  }
    947. 

  947.  else if(param->unsafefilter && param->ndatfilterssrv > 0 && contentlength64 > 0 && param->operation != HTTP_HEAD && res != 204 && res != 304){
    948. 

  948.   uint64_t newlen;
    949. 

  949.   newlen = (uint64_t)sockfillbuffsrv(param, (unsigned long) contentlength64, CONNECTION_S);
    950. 

  950.   if(newlen == contentlength64) {
    951. 

  951. 	action = handledatfltsrv(param,  &param->srvbuf, &param->srvbufsize, 0, &param->srvinbuf);
    952. 

  952. 	param->nolongdatfilter = 1;
    953. 

  953. 	if(action == HANDLED){
    954. 

  954. 		RETURN(0);
    955. 

  955. 	}
    956. 

  956. 	if(action != PASS) RETURN(517);
    957. 

  957. 	contentlength64 = param->srvinbuf;
    958. 

  958. 	sprintf((char*)buf+strlen((char *)buf), "Content-Length: %"PRINTF_INT64_MODIFIER"u\r\n", contentlength64);
    959. 

  959. 	hascontent = 1;
    960. 

  960.   }
    961. 

  961.  }
    962. 

  962.  if (contentlength64 > 0 && hascontent != 1) ckeepalive = 0;
    963. 

  963. #else
    964. 

  964. #endif
    965. 

  965.  if(!isconnect || param->operation){
    966. 

  966. 	 if(authenticate && !param->transparent) sprintf((char*)buf+strlen((char *)buf), 
    967. 

  967. 		"Proxy-support: Session-Based-Authentication\r\n"
    968. 

  968. 		"Connection: Proxy-support\r\n"
    969. 

  969. 	 );
    970. 

  970. 	 if(!param->srv->transparent){
    971. 

  971. 		if(ckeepalive <= 1) sprintf((char*)buf+strlen((char *)buf), "Connection: %s\r\n", 
    972. 

  972. 		(hascontent && ckeepalive)?"Keep-Alive":"Close");
    973. 

  973. 		if(!param->transparent)sprintf((char*)buf+strlen((char *)buf), "Proxy-Connection: %s\r\n", 
    974. 

  974. 		(hascontent && ckeepalive)?"Keep-Alive":"Close");
    975. 

  975. 	 }
    976. 

  976. 	 sprintf((char*)buf + strlen((char *)buf), "\r\n");
    977. 

  977. 	 if((socksend(param->clisock, buf, (int)strlen((char *)buf), conf.timeouts[STRING_S])) != (int)strlen((char *)buf)) {
    978. 

  978. 		RETURN(521);
    979. 

  979. 	 }
    980. 

  980.  }
    981. 

  981.  if((param->chunked || contentlength64 > 0) && param->operation != HTTP_HEAD && res != 204 && res != 304) {
    982. 

  982.  	do {
    983. 

  983. 		if(param->chunked){
    984. 

  984. 			char smallbuf[32];
    985. 

  985. 			while ((i = sockgetlinebuf(param, SERVER, smallbuf, 30, '\n', conf.timeouts[STRING_S])) == 2) {
    986. 

  986. 				if (socksend(param->clisock, smallbuf, i, conf.timeouts[STRING_S]) != i){
    987. 

  987. 					RETURN(533);
    988. 

  988. 				}
    989. 

  989. 				if(param->chunked == 2) break;
    990. 

  990. 			}
    991. 

  991. 			if(i<3) {
    992. 

  992. 				keepalive = 0;
    993. 

  993. 				break;
    994. 

  994. 			}
    995. 

  995. 			if (socksend(param->clisock, smallbuf, i, conf.timeouts[STRING_S]) != i){
    996. 

  996. 					RETURN(535);
    997. 

  997. 			}
    998. 

  998. 			if(param->chunked == 2) {
    999. 

  999. 				if((i = sockgetlinebuf(param, SERVER, smallbuf, 30, '\n', conf.timeouts[STRING_S])) != 2) RETURN(534);
    1000. 

  1000. 				if (socksend(param->clisock, smallbuf, i, conf.timeouts[STRING_S]) != i){
    1001. 

  1001. 					RETURN(533);
    1002. 

  1002. 				}
    1003. 

  1003. 				break;
    1004. 

  1004. 			}
    1005. 

  1005. 			smallbuf[i] = 0;
    1006. 

  1006. 			contentlength64 = 0;
    1007. 

  1007. 			sscanf(smallbuf, "%"PRINTF_INT64_MODIFIER"x", &contentlength64);
    1008. 

  1008. 			if(contentlength64 == 0) {
    1009. 

  1009. 				param->chunked = 2;
    1010. 

  1010. 			}
    1011. 

  1011. 		}
    1012. 

  1012. 		if(param->chunked != 2){
    1013. 

  1013. 			param->waitserver64 = contentlength64;
    1014. 

  1014. 		 	if((res = sockmap(param, conf.timeouts[CONNECTION_S])) != 98){
    1015. 

  1015. 				RETURN(res);
    1016. 

  1016. 			}
    1017. 

  1017. 	 		param->waitserver64 = 0;
    1018. 

  1018. 		}
    1019. 

  1019.         } while(param->chunked);
    1020. 

  1020.  }
    1021. 

  1021.  if(isconnect && res == 200 && param->operation){
    1022. 

  1022. 	RETURN (sockmap(param, conf.timeouts[CONNECTION_S]));
    1023. 

  1023.  }
    1024. 

  1024.  else if(isconnect){
    1025. 

  1025. 	ckeepalive = keepalive = 1;
    1026. 

  1026.  }
    1027. 

  1027.  else if(!hascontent && !param->chunked) {
    1028. 

  1028. 	RETURN(sockmap(param, conf.timeouts[CONNECTION_S]));
    1029. 

  1029.  }
    1030. 

  1030.  contentlength64 = 0;
    1031. 

  1031. REQUESTEND:
    1032. 

  1032. 

  1033.  if((!ckeepalive || !keepalive) && param->remsock != INVALID_SOCKET){
    1034. 

  1034. 	so._shutdown(param->remsock, SHUT_RDWR);
    1035. 

  1035. 	so._closesocket(param->remsock);
    1036. 

  1036. 	param->remsock = INVALID_SOCKET;
    1037. 

  1037. 	RETURN(0);
    1038. 

  1038.  }
    1039. 

  1039.  if(param->transparent && (!ckeepalive || !keepalive)) {RETURN (0);}
    1040. 

  1040.  logurl(param, buf, (char *)req, ftp);
    1041. 

  1041.  param->status = 0;
    1042. 

  1042. 

  1043. }
    1044. 

  1044. 

  1045. CLEANRET:
    1046. 

  1046. 

  1047.  if(param->res != 555 && param->res && param->clisock != INVALID_SOCKET && (param->res < 90 || param->res >=800 || param->res == 100 ||(param->res > 500 && param->res< 800))) {
    1048. 

  1048. 	if((param->res>=509 && param->res < 517) || param->res > 900) while( (i = sockgetlinebuf(param, CLIENT, buf, BUFSIZE - 1, '\n', conf.timeouts[STRING_S])) > 2);
    1049. 

  1049. 	if(param->res == 10) {
    1050. 

  1050. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[2], (int)strlen(proxy_stringtable[2]), conf.timeouts[STRING_S]);
    1051. 

  1051. 	}
    1052. 

  1052. 	else if (res == 700 || res == 701){
    1053. 

  1053. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[16], (int)strlen(proxy_stringtable[16]), conf.timeouts[STRING_S]);
    1054. 

  1054. 		socksend(param->clisock, (unsigned char *)ftpbuf, inftpbuf, conf.timeouts[STRING_S]);
    1055. 

  1055. 	}
    1056. 

  1056. 	else if(param->res == 100 || (param->res >10 && param->res < 20) || (param->res >701 && param->res <= 705)) {
    1057. 

  1057. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[1], (int)strlen(proxy_stringtable[1]), conf.timeouts[STRING_S]);
    1058. 

  1058. 	}
    1059. 

  1059. 	else if(param->res >=20 && param->res < 30) {
    1060. 

  1060. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[6], (int)strlen(proxy_stringtable[6]), conf.timeouts[STRING_S]);
    1061. 

  1061. 	}
    1062. 

  1062. 	else if(param->res >=30 && param->res < 80) {
    1063. 

  1063. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[5], (int)strlen(proxy_stringtable[5]), conf.timeouts[STRING_S]);
    1064. 

  1064. 	}
    1065. 

  1065. 	else if(param->res == 1 || (param->srv->nouser && param->res < 10)) {
    1066. 

  1066. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[11], (int)strlen(proxy_stringtable[11]), conf.timeouts[STRING_S]);
    1067. 

  1067. 	}
    1068. 

  1068. 	else if(param->res < 10) {
    1069. 

  1069. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[param->srv->usentlm?12:7], (int)strlen(proxy_stringtable[param->srv->usentlm?12:7]), conf.timeouts[STRING_S]);
    1070. 

  1070. 	}
    1071. 

  1071. 	else if(param->res == 999) {
    1072. 

  1072. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[4], (int)strlen(proxy_stringtable[4]), conf.timeouts[STRING_S]);
    1073. 

  1073. 	}
    1074. 

  1074. 	else if(param->res == 519) {
    1075. 

  1075. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[3], (int)strlen(proxy_stringtable[3]), conf.timeouts[STRING_S]);
    1076. 

  1076. 	}
    1077. 

  1077. 	else if(param->res == 517) {
    1078. 

  1078. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[15], (int)strlen(proxy_stringtable[15]), conf.timeouts[STRING_S]);
    1079. 

  1079. 	}
    1080. 

  1080. 	else if(param->res == 780) {
    1081. 

  1081. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[10], (int)strlen(proxy_stringtable[10]), conf.timeouts[STRING_S]);
    1082. 

  1082. 	}
    1083. 

  1083. 	else if(param->res >= 511 && param->res<=516){
    1084. 

  1084. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[0], (int)strlen(proxy_stringtable[0]), conf.timeouts[STRING_S]);
    1085. 

  1085. 	}
    1086. 

  1086.  } 
    1087. 

  1087.  logurl(param, buf, (char *)req, ftp);
    1088. 

  1088.  if(req)myfree(req);
    1089. 

  1089.  if(buf)myfree(buf);
    1090. 

  1090.  if(ftpbase)myfree(ftpbase);
    1091. 

  1091.  freeparam(param);
    1092. 

  1092.  return (NULL);
    1093. 

  1093. }
    1094. 

  1094. 

  1095. #ifdef WITHMAIN
    1096. 

  1096. struct proxydef childdef = {
    1097. 

  1097. 	proxychild,
    1098. 

  1098. 	3128,
    1099. 

  1099. 	0,
    1100. 

  1100. 	S_PROXY,
    1101. 

  1101. 	"-a - anonymous proxy\r\n"
    1102. 

  1102. 	"-a1 - anonymous proxy with random client IP spoofing\r\n"
    1103. 

  1103. };
    1104. 

  1104. #include "proxymain.c"
    1105. 

  1105. #endif
    1106.